CVE-2021-3007

This repository contains a functional PHP deserialization exploit for CVE-2021-3007, targeting Zend Framework 3. It constructs a malicious serialized payload using Zend classes to achieve remote code execution (RCE) via the `system` and `phpinfo` functions.

This repository provides a fully functional vulnerable test environment for CVE-2021-3007, an insecure deserialization vulnerability in Laminas/Zend Framework. It includes a Dockerized setup with a vulnerable PHP application that accepts and deserializes untrusted input, along with a pre-constructed payload for testing RCE.

This repository contains a functional exploit for CVE-2021-3007, a PHP deserialization vulnerability in Laminas/Zend HTTP. It includes a Dockerized vulnerable environment, a standalone exploit script, and a Nuclei template for automated testing.